CVE-2013-2004

libX11 < 1.5.99.901 - Denial of Service via Recursive File Include Directives

Title source: llm
STIX 2.1

Description

The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file.

References (4)

Core 4
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1854-1
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/05/23/3
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2013/dsa-2693

Scores

EPSS 0.0158
EPSS Percentile 72.6%

Details

CWE
CWE-119
Status published
Products (2)
x/libx11 1.5.0
x/libx11 < 1.5.99.901
Published Jun 15, 2013
Tracked Since Feb 18, 2026